What Happened
On or about March 1, 2024 – May 3, 2024, an unauthorized third party remotely accessed certain IAMS computer systems, and, as a result, accessed and/or acquired some files containing personal information. Upon becoming aware of the incident, IAMS engaged third-party cybersecurity experts to remediate, further investigate, and determine the scope of the incident.
What Information Was Involved
IAMS has been investigating this data security incident, which has included working with cybersecurity advisors to attempt to determine the scope of the incident and data potentially involved in the incident. This process concluded on or about July 12, 2024, after which IAMS worked to identify individuals whose information may have been present in the identified systems and contact information for those individuals. Social Security numbers, Passport numbers, driver’s license numbers, account numbers, dates of birth, EINs, certain financial information, business email credentials, and certain medical information was present in the impacted computer systems and may have been accessible to the unauthorized third party. Again, IAMS is not aware of any identity theft or fraud in relation to this incident but is providing this notice out of an abundance of caution.
What We Are Doing
Upon learning of the incident, IAMS launched an investigation, assessed the security of its systems, and took actions to help prevent a similar incident from occurring in the future, including security enhancements. IAMS also reported the incident to the Federal Bureau of Investigation and sent notifications to potentially affected individuals. Although we are not aware of any identity theft or fraud as a result of this incident, to ease any concerns that affected individuals might have about this situation, we are offering the affected individuals identity theft protection services through CyEx.
What You Can Do
Individuals should remain vigilant by reviewing account statements and monitoring free credit reports.
- Remain vigilant by reviewing account statements and monitoring credit reports. Under federal law, you also are entitled every 12 months to one free copy of your credit report from each of the three major consumer reporting To obtain a free annual credit report, go to www.annualcreditreport.com or call 1-877-322-8228. You may wish to stagger your requests so that you receive a free report by one of the three credit bureaus every four (4) months. Immediately report any suspicious activity. You can report suspected incidents of identity theft to local law enforcement, your state’s attorney general, and the Federal Trade Commission (“FTC”).
- Place Fraud Alerts with the three consumer reporting If you choose to place a fraud alert, we recommend you do this after activating your credit monitoring. You can place a fraud alert at one of the three major consumer reporting agencies by phone and also via Experian’s or Equifax’s website. A fraud alert tells creditors to follow certain procedures, including contacting you, before they open any new accounts or change your existing accounts. For that reason, placing a fraud alert can protect you, but also may delay you when you seek to obtain credit. The contact information for all three agencies is as follows: